Optional. Specifies a resource for analysis. Leaving it empty
means ANY.
Optional. Specifies roles or permissions for analysis. Leaving
it empty means ANY.
Classes
AccessSelector
Specifies roles and/or permissions to analyze, to determine both the
identities possessing them and the resources they control. If multiple
values are specified, results will include identities and resources
matching any of them.
Optional. The permissions to appear in result.
IdentitySelector
Specifies an identity for which to determine resource access, based on
roles assigned either directly to them or to the groups they belong
to, directly or indirectly.
ResourceSelector
Specifies the resource to analyze for access policies, which may be
set directly on the resource, or on ancestors such as organizations,
folders or projects. At least one of [ResourceSelector][google.cloud.a
sset.v1p4beta1.IamPolicyAnalysisQuery.ResourceSelector], [IdentitySele
ctor][google.cloud.asset.v1p4beta1.IamPolicyAnalysisQuery.IdentitySele
ctor] or [AccessSelector][google.cloud.asset.v1p4beta1.IamPolicyAnalys
isQuery.AccessSelector] must be specified in a request.